When auditing an application change control process, which of the following procedures should be included in the scope of the audit? 1. Ensure system change requests are formally initiated, documented, and approved. 2. Ensure processes are in place to prevent emergency changes from taking place. 3. Ensure changes are adequately tested before being placed into the production environment. 4. Evaluate whether the procedures for program change management are adequate.
A) 1 only
B) 1 and 3 only
C) 2 and 4 only
D) 1, 3, and 4 only

Question

Quizplus · Accepted Answer

The audit should ensure that change requests are formally initiated, documented, and approved (1), changes are adequately tested before production (3), and evaluate the adequacy of program change management procedures (4). Preventing emergency changes (2) is not practical, but managing them is important.

When Auditing an Application Change Control Process, Which of the Following